$ rpki-client -vvf rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft File: CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft (raw, json) Hash identifier: Jk95goJOvx3HyZp4S0t6iKVoHK/pzKW2uBHywYCAU10= Subject key identifier: 75:FB:F4:7B:E0:EE:F7:0C:4A:D5:C6:EA:8B:E4:F5:49:56:65:C7:61 Authority key identifier: 0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92 Certificate issuer: /CN=A9124679/serialNumber=0A480517741076FE763E4E9E32F35BD459893292 Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft Manifest number: 0202 Signing time: Tue 01 Jul 2025 02:54:21 +0000 Manifest this update: Tue 01 Jul 2025 02:54:21 +0000 Manifest next update: Tue 08 Jul 2025 02:54:21 +0000 Files and hashes: 1: CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl (hash: KXe+9yjyyvtxKlTNb17aKKM8LfqYXv3Dp0sAFQB/rmo=) 2: F7D11060619811ED9437B344C4F9AE02.roa (hash: qAnnelNEaBIcl+tlBGt8/4Pa4w6K1hQge4BvLhS2BHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124679, serialNumber=0A480517741076FE763E4E9E32F35BD459893292 Validity Not Before: Jul 1 02:54:21 2025 GMT Not After : Jul 8 02:54:21 2025 GMT Subject: CN=68634ddd-711d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dd:09:e3:e0:5e:24:a5:55:73:0a:6f:3b:02: 97:8d:d9:66:a6:55:37:fe:4e:b5:53:20:84:87:e2: e0:6e:78:6d:a0:46:e0:a5:30:c6:0e:68:71:fd:0d: 01:48:6d:31:b2:8b:53:2d:6b:24:16:c7:a1:79:e5: 71:50:d8:68:a4:3c:fd:fc:cb:32:fc:18:bc:63:b5: 83:10:79:f1:17:80:15:71:18:41:d8:ef:45:86:c8: 0e:9c:f3:18:31:1a:02:8c:74:61:b2:0e:2f:ed:fd: 61:57:50:36:6a:50:45:cf:ba:4b:2c:84:79:58:29: 65:c3:99:c1:26:03:0d:03:e0:da:8d:50:59:68:03: 70:0e:6d:df:bf:41:d0:06:05:57:51:32:f6:56:1f: 7e:af:83:d2:a3:e6:6c:14:5b:2b:1c:f0:d8:4e:23: 3d:35:f5:88:0d:ad:c6:01:f9:79:b0:e2:f7:93:ea: 74:a5:ef:07:c7:fb:41:14:08:36:e5:38:93:5f:ec: 36:fc:66:d9:88:e1:0b:52:24:8f:02:7b:7e:ab:33: 50:88:77:c8:48:64:a1:b2:ea:c6:f9:59:2b:d0:cc: 5b:c8:9a:45:b4:84:3c:f3:7e:62:dc:7e:0b:fe:d6: ba:f0:50:70:ea:22:38:57:d5:0c:5a:ae:ef:5b:84: 41:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:FB:F4:7B:E0:EE:F7:0C:4A:D5:C6:EA:8B:E4:F5:49:56:65:C7:61 X509v3 Authority Key Identifier: keyid:0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:53:e4:78:3b:7d:86:1f:06:a6:0e:ad:b4:74:48:01:28:53: 13:ff:ac:c5:7a:e2:4c:e3:5c:7c:d7:b3:26:28:d4:e8:b5:a7: 09:c5:c9:27:eb:27:6b:f2:79:53:39:93:59:01:bc:61:51:0b: da:42:42:fc:4a:c9:9f:a6:77:08:14:1e:53:47:df:d8:fe:de: d7:03:dd:91:41:03:8d:d7:fc:80:6c:5a:bb:45:d8:c9:b1:fa: b3:34:9f:07:a3:9e:f2:f4:45:42:57:be:7c:30:1d:02:91:07: ac:eb:71:d9:df:3a:5e:cd:1d:35:f2:fa:19:89:f8:0c:df:23: bc:53:a3:e5:a8:11:e5:88:8c:8e:d8:18:a4:e1:c7:04:d2:07: db:0b:a5:b2:d6:85:3e:36:2d:04:4d:db:66:f8:98:c9:66:81: 6f:ae:db:49:47:a0:2b:83:e6:d5:3b:39:b3:53:dc:1d:72:fb: c4:79:49:9e:76:93:7c:68:22:56:a1:f9:18:f2:f4:4f:55:ee: ce:d3:85:a1:4c:9b:08:2c:a9:73:a8:b7:6a:32:84:ff:27:6e: 3e:b5:58:ea:45:27:82:73:be:f8:34:4f:b5:8f:42:58:9a:2f: 5f:d7:73:de:2d:54:2e:b1:0a:f0:e2:f0:bb:a6:77:4b:18:3a: 49:be:71:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ2NzkxMTAvBgNVBAUTKDBBNDgwNTE3NzQxMDc2RkU3NjNFNEU5RTMyRjM1QkQ0 NTk4OTMyOTIwHhcNMjUwNzAxMDI1NDIxWhcNMjUwNzA4MDI1NDIxWjAYMRYwFAYD VQQDEw02ODYzNGRkZC03MTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzd0J4+BeJKVVcwpvOwKXjdlmplU3/k61UyCEh+LgbnhtoEbgpTDGDmhx/Q0B SG0xsotTLWskFseheeVxUNhopDz9/Msy/Bi8Y7WDEHnxF4AVcRhB2O9FhsgOnPMY MRoCjHRhsg4v7f1hV1A2alBFz7pLLIR5WCllw5nBJgMNA+DajVBZaANwDm3fv0HQ BgVXUTL2Vh9+r4PSo+ZsFFsrHPDYTiM9NfWIDa3GAfl5sOL3k+p0pe8Hx/tBFAg2 5TiTX+w2/GbZiOELUiSPAnt+qzNQiHfISGShsurG+Vkr0MxbyJpFtIQ8835i3H4L /ta68FBw6iI4V9UMWq7vW4RBQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHX79Hvg 7vcMStXG6ovk9UlWZcdhMB8GA1UdIwQYMBaAFApIBRd0EHb+dj5OnjLzW9RZiTKS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDY3OS9GNUI3OEE4ODYx OTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2NTJQazZlTXZOYjFGbUpN cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrZ0ZGM1FRZHY1MlBrNmVNdk5iMUZtSk1wSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDY3OS9GNUI3OEE4ODYxOTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2 NTJQazZlTXZOYjFGbUpNcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAU+R4O32GHwamDq20dEgBKFMT/6zFeuJM41x817MmKNTotacJxckn 6ydr8nlTOZNZAbxhUQvaQkL8SsmfpncIFB5TR9/Y/t7XA92RQQON1/yAbFq7RdjJ sfqzNJ8Ho57y9EVCV758MB0CkQes63HZ3zpezR018voZifgM3yO8U6PlqBHliIyO 2Bik4ccE0gfbC6Wy1oU+Ni0ETdtm+JjJZoFvrttJR6Arg+bVOzmzU9wdcvvEeUme dpN8aCJWofkY8vRPVe7O04WhTJsILKlzqLdqMoT/J24+tVjqRSeCc774NE+1j0JY mi9f13PeLVQusQrw4vC7pndLGDpJvnFD -----END CERTIFICATE-----Generated at Thu Jul 3 01:03:44 2025 by rpki-client